Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: uvW+d+BquCuS2dQGUzGcEn/r9cdWMpfFmmXsX2ybEGw=
Subject key identifier: D1:35:C3:E8:9C:62:2B:47:DB:A3:80:52:7A:9C:28:75:22:9E:C4:18
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019F1BD6E8F04A114BC7C52A749650B3E75C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 198F
Signing time: Wed 01 Jul 2026 04:01:36 +0000
Manifest this update: Wed 01 Jul 2026 04:01:36 +0000
Manifest next update: Thu 02 Jul 2026 04:01:36 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: dislF2a/Tz2cWMdZqcuV+lUorEgHUhHuJV2q4h8af28=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:d6:e8:f0:4a:11:4b:c7:c5:2a:74:96:50:b3:e7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: Jul 1 04:01:36 2026 GMT
Not After : Jul 2 04:01:36 2026 GMT
Subject: CN=d135c3e89c622b47dba380527a9c2875229ec418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:a2:28:9c:22:29:01:1e:80:1e:95:d2:15:
64:46:2e:e1:40:8c:f9:24:37:28:3d:bb:88:2d:f5:
7d:01:77:37:09:d0:63:bc:db:2b:df:e4:98:c6:a8:
9c:2e:41:71:f9:97:fe:22:0c:93:43:5f:f8:6c:0e:
c8:f9:e1:31:e1:f1:d1:78:25:11:a7:44:76:20:1d:
24:e2:18:c5:83:2e:47:22:a9:31:f5:77:98:77:08:
cd:ff:d8:bd:09:c0:fd:c5:0a:2c:75:73:f9:04:07:
cb:4a:ed:8a:b7:55:c0:7f:7d:d4:5f:88:96:14:bc:
b6:a3:da:22:cf:c8:87:f4:c6:a0:65:92:dc:71:7e:
02:33:7e:33:50:17:e2:1e:de:4c:ab:94:9d:04:f8:
49:e0:fe:a1:e5:c3:80:ad:4e:e2:a3:da:5b:9c:cb:
4d:84:43:8c:10:d4:46:ac:1d:c0:ca:20:3f:4c:98:
5c:82:51:88:df:80:ee:cd:ec:d4:37:30:1f:ab:b6:
46:33:45:78:8b:18:57:82:44:22:44:b8:b5:a3:1c:
e7:53:2c:66:e9:79:f0:2b:ec:88:b2:f5:5e:28:04:
ba:44:6a:e5:fd:4d:c7:81:02:1b:ef:51:56:d5:f5:
7c:53:1c:a1:e8:bb:cd:68:c0:5a:3c:14:02:a0:2e:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:C3:E8:9C:62:2B:47:DB:A3:80:52:7A:9C:28:75:22:9E:C4:18
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:55:fb:98:1f:d7:6e:41:04:b8:89:52:d8:2e:fc:07:ce:e4:
9c:37:18:56:8c:3c:c6:cd:aa:2a:26:67:2f:2c:b3:31:c4:28:
23:3a:ed:01:1d:cb:82:aa:67:74:41:f0:ff:db:d8:95:7d:aa:
eb:4d:37:e8:99:5a:ad:a6:1d:db:d1:35:3b:fc:ac:10:18:9e:
59:30:2f:24:56:3b:23:48:a3:9a:13:8f:de:ac:50:23:d2:19:
a7:9a:89:1d:d9:7c:36:e7:90:9b:42:6c:17:be:fc:ae:05:e7:
be:b0:02:b8:e5:ae:0f:9d:2c:84:9b:97:95:88:f4:b6:c2:7e:
51:3b:81:c2:5c:cf:ac:de:79:9e:54:c4:fe:fd:8f:9c:da:de:
91:ce:35:bf:3e:bd:ea:1b:be:3c:11:64:83:42:4e:a3:2d:f9:
03:7a:ad:f7:52:ec:f2:e0:eb:9a:d3:cc:6c:a3:04:97:dc:6b:
3f:5f:03:d8:fc:c4:57:67:41:d9:ba:84:9e:74:52:8e:22:4f:
06:c8:a0:e6:a1:fb:c1:c8:f0:ec:af:ca:e8:3a:93:97:7c:b0:
87:07:fd:6e:7e:38:85:fb:14:7c:59:58:05:7a:72:bc:68:c5:
f9:6d:f7:2d:68:53:ff:4f:de:91:82:3c:44:b0:5c:3d:2e:25:
3f:ee:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:26:28 2026 by rpki-client